AZ-900 · Question #84
This question requires that you evaluate the underlined text to determine if it is correct. If a resource group named RG1 has a delete lock, only a member of the global administrators group can delete
The correct answer is B. the delete lock must be removed before an administrator. If an Azure resource group has a delete lock, it cannot be deleted until the lock is explicitly removed, regardless of the user's role.
Question
Options
- ANo change is needed
- Bthe delete lock must be removed before an administrator
- Can Azure policy must be modified before an administrator
- Dan Azure tag must be added before an administrator
How the community answered
(49 responses)- B94% (46)
- C2% (1)
- D4% (2)
Why each option
If an Azure resource group has a delete lock, it cannot be deleted until the lock is explicitly removed, regardless of the user's role.
A delete lock prevents deletion for all users, including global administrators, until the lock itself is removed.
Azure resource locks prevent accidental deletion or modification of resources, and a delete lock specifically prohibits deletion, even by users with owner or global administrator permissions. The lock must be removed before any administrator can delete the resource group.
Azure Policy is used for enforcing standards and compliance, but it does not directly override a resource lock; a lock must be removed irrespective of policy.
Azure tags are used for organizing and categorizing resources and have no direct impact on preventing or allowing the deletion of resources protected by a resource lock.
Concept tested: Azure Resource Locks
Source: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources
Community Discussion
No community discussion yet for this question.